• 0 Posts
  • 104 Comments
Joined 2 years ago
cake
Cake day: August 12th, 2024

help-circle


  • Yes, cloudflare will not tamper with your record because you are not important enough to be worth the reputation loss. Realistically, no harm will come to you from cloudflare.

    However! They are still the party that could theoretically cause the largest amount of damage to both you and your users.

    Cloudflare cannot track visitors of my website, the only malicious thing they can do is to tamper with my DNS record.

    They “cannot” only because they say so. Changing your DNS record allows them to read 100% of all incoming traffic even if it is TLS encrypted (because they can acquire a valid TLS certificate for your domain through a DNS challenge).


  • DNS is the most important foundational stone. Whoever controls your DNS can redirect all of your users to any address they want AND present a valid TLS cert through a DNS challenge. They can also redirect all E-Mails of the associates domain, and if any address was used to register an account, they can reset that accounts password. Trusting someone to handle your DNS is the highest trust you can put on someone on the internet. And that is both for a website povider trusting the registrar of their domain and for a end user with their DNS resolver.


  • Yes! I’d love ethical personalized adds. Show me exactly what I am looking for, when i want to look for it and nothing else ever. In get to see way fewer ads and the advertisers have to pay less because they have to show fewer ads.

    But as long as collecting and holding my data is done by capitalism it can never be a positive thing and has to be avoided at all times.


  • Some things should be 100% outside of the control of developers. Zooming in/out and selecting/copying/pasting text are my main issues. You have no right to decide I am not allowed to copy the text from your site. Fuck you. It doesn’t protect shit. You sent the text in a HTML file to my computer and then dare to tell me i am not allowed to copy it? I can read it on my screen. I can type it myself. I can use OCR to have a program read it for me. I can open the source code and copy it there. All it does is make your site awfull to use!


  • I thin it should be like this: the system defines something like 10-15 main colors (text, text background, foreground, main accent, highlight bright, highlight dark …). All programs are designed in terms of those colors. Designers don’t put “green here, black there” but “main color here, highlight there”.

    But they also have the option to recommend the user a app specific color set that can either be applied to that app only or system wide.

    By default every app uses their own recommended theme unless the user has set the option to override app themes with the system theme.



  • But all citrus fruits are called citrus fruit. And they also have a different name each. And they get classified at different levels depending on need. Imaginary somebody tells me “they don’t like fruit because they ate an apricot and it tasted bad” and I say “but have you tried a Jaffa orange from north Palestine from the farm of <name here>, because that is different from an apricot”. No I’ll say “apricots are stone fruit and maybe you should try a citrus fruit before you judge all fruit.” But I wouldn’t say “maybe try ice cream that’s better than apricot”.

    Do you think the term movie is bad? Or the term Music? Or the term Food? If you buy videogames solely on the fact that it says video game on the box then that is your problem and not that of the word.


  • Yeah same. For some reason I just liked the old persona a lot more. Just something about that uncompromising “I am right because I say so. Thank God for me”. I didn’t agree with all opinions but the persona just felt unique. Then they shifted a lot to the weird. Wtf was that cornflakes homunculus? That was still pre transition and continued after. Haven’t watched a video in a few years, maybe they have found a new solid identity by now but that interim period just put me of to mutch.





  • Terminology: revoked means the issuer of the certificate has decided that the certificate should not be trusted anymore even though it is still valid.

    If a attacker gets access to a certificates key, they can impersonate the server until the validity period of the cert runs out or it is revoked by the CA. However … revocation doesn’t work. The revocation lists arent checked by most clients so a stolen cert will be accepted potentially for a very long time.

    The second argument for shorter certs is adoption of new technology so certs with bad cryptographic algorithms are circled out quicker.

    And third argument is: if the validity is so short you don’t want to change the certs manually and automate the process, you can never forget and let your certs expire.

    We will probably get to a point of single day certs or even one cert per connection eventually and every step will be saver than before (until we get to single use certs which will probably fuck over privacy)





  • You don’t need something ever. Sometimes you just want something because the alternative is realy bad. I don’t need to eat. I want to eat because I don’t want to starve.

    I want to watch a movie with my partner at the agrees time because otherwise they will be mad. I want to access my digitalized documents to send a letter in time because otherwise I will have to pay late fees. I want to access my gameserver because that’s the one time a week I get to have fun with my friends from my college time.

    There are many situations where I’d rather do the thing I want instead of doing maintenance.